{"license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/","attribution":"ChainChoice (https://chainchoice.io)","category":"mpc_wallets","evidenceReadAt":"2026-10-22","generatedAt":"2026-11-12","criteria":[{"id":"exit_survivability_mpc","label":"Vendor-Exit Survivability","weight":40},{"id":"crypto_audit_posture_mpc","label":"Cryptographic Audit & SOC 2 Posture","weight":25},{"id":"pricing_transparency_mpc","label":"Published Pricing Actionability","weight":20},{"id":"share_custody_model_mpc","label":"Key-Share Custody Disclosure","weight":15}],"providers":{"dfns_mpc":{"exit_survivability_mpc":{"s":9,"q":"That makes Layer 4 a fully independent recovery path: you can reconstruct your keys from only your private key and the backup files, even if DFNS is unavailable or the signer’s Core Keys Pack is lost.","u":"https://docs.dfns.co/advanced/deployment-models/disaster-recovery","d":"2026-10-22"},"crypto_audit_posture_mpc":{"s":8,"q":"Our platform, including our MPC libraries, authentication services, and infrastructure, is regularly audited and tested by leading security firms like Kudelski Security, Halborn, and Redacted .","u":"https://docs.dfns.co/core-concepts/dfns-security-model","d":"2026-10-22"},"pricing_transparency_mpc":{"s":7,"q":"How does wallet pricing work as I scale? Pro and Enterprise include a large wallet allowance out of the box, and additional wallets are priced on a volume basis that gets cheaper the more you run.","u":"https://dfns.co/pricing","d":"2026-10-22"},"share_custody_model_mpc":{"s":9,"q":"DFNS manages some signers in our cloud, you operate the rest in your own infrastructure. This makes you a required participant in every signing ceremony, giving you a cryptographic veto over any transaction.","u":"https://docs.dfns.co/advanced/deployment-models/mpc","d":"2026-10-22"}},"turnkey_mpc":{"exit_survivability_mpc":{"s":7,"q":"Turnkey’s enclave encrypts the wallet mnemonic or private key to your TEK using HPKE , then returns the encrypted bundle. Only the holder of the TEK private key can decrypt the result — not Turnkey, not your application server.","u":"https://docs.turnkey.com/features/wallets/export-wallets","d":"2026-10-22"},"crypto_audit_posture_mpc":{"s":8,"q":"Compliance-ready SOC 2 Type II audited. Built to support KYC, AML, and travel-rule integrations — Turnkey provides the wallet primitives; your compliance stack plugs in. Distrust Cure53 Trail of Bits Zellic SOC 2 Type II","u":"https://www.turnkey.com/","d":"2026-10-22"},"pricing_transparency_mpc":{"s":8,"q":"What are the per transaction fees for Transaction Management? Transaction Management fees are charged on a per-transaction basis.","u":"https://www.turnkey.com/pricing","d":"2026-10-22"},"share_custody_model_mpc":{"s":5,"q":"Turnkey stores encrypted private keys that are only decrypted when you authenticate to an auditable, tamper-proof secure enclave with your secret","u":"https://docs.turnkey.com/security/non-custodial-key-mgmt","d":"2026-10-22"}},"privy_mpc":{"exit_survivability_mpc":{"s":7,"q":"This means that users can send transactions or export their keys using their access token with the Privy API, even if an application does not implement Privy’s exportWallet method. This design ensures users always retain self-sovereign access to their wallet keys.","u":"https://docs.privy.io/wallets/wallets/export","d":"2026-10-22"},"crypto_audit_posture_mpc":{"s":8,"q":"Cure 53 February 2023 Status: Complete Zellic June 2023 Status: Complete SwordBytes December 2023 Status: Complete Doyensec February 2024 Status: Complete SOC 2 Type II April 2026 Status: Complete","u":"https://www.privy.io/security","d":"2026-10-22"},"pricing_transparency_mpc":{"s":8,"q":"Apps exceeding 10K MAU, 50K monthly signatures, or $1M monthly transaction volume are billed based on usage. Learn more in our FAQ .","u":"https://www.privy.io/pricing","d":"2026-10-22"},"share_custody_model_mpc":{"s":6,"q":"When a wallet is created, it is split into two shares, protected by different security boundaries: Enclave share , also referred to as the TEE share, which is secured directly by the trusted execution environment and encrypted with the TEE’s cryptographic key.","u":"https://docs.privy.io/security/wallet-infrastructure/architecture","d":"2026-10-22"}},"zengo_mpc":{"exit_survivability_mpc":{"s":8,"q":"Recovery mode: If the Trustee discovers that Zengo is not operational, they can request the decryption key from the escrow provider; The trustee will then post the decryption key to a dedicated GitHub account .","u":"https://zengo.com/how-zengo-guarantees-access-to-customers-funds/","d":"2026-10-22"},"crypto_audit_posture_mpc":{"s":5,"q":"Was Zengo’s security audited? Yes. We regularly perform formal and external security audits on our apps made by reputable firms. Our MPC cryptography is open-source, audited and peer-reviewed.","u":"https://zengo.com/security/","d":"2026-10-22"},"pricing_transparency_mpc":{"s":6,"q":"* Cancel any time. Payment via Apple and Google in-app purchase. Prices may vary with store policies and/or market conditions. Prices displayed are valid in the USA in USD; prices in other regions and currencies may differ.","u":"https://zengo.com/pro/","d":"2026-10-22"},"share_custody_model_mpc":{"s":7,"q":"Instead of the traditional seed phrase, Zengo is powered by two independently-created “secret shares.” One share (your Personal Share) is created and stored on your mobile device. The second share (your Remote Share) is created and secured on Zengo’s servers.","u":"https://zengo.com/security/","d":"2026-10-22"}},"web3auth_mpc":{"exit_survivability_mpc":{"s":6,"q":"Manual export is always available through the built-in wallet interface. Users initiate it themselves; your dapp has no control over it.","u":"https://docs.metamask.io/embedded-wallets/dashboard/advanced/key-export/","d":"2026-10-22"},"crypto_audit_posture_mpc":{"s":4,"q":"Is MMEW compliant with regulations? Yes. We’re compliant with GDPR, CCPA, and SOC 2 Type II standards, supporting enterprise and global privacy requirements. Our infrastructure is subject to routine audits and features a 99.99% service availability guarantee.","u":"https://metamask.io/developer/embedded-wallets","d":"2026-10-22"},"pricing_transparency_mpc":{"s":7,"q":"Enterprise CUSTOM For teams and companies that require advanced features and dedicated support Volume Based MAW Discounts Email, SMS, Wallet, Passkeys, and Social Logins Third-party Authentication Support and Custom Domains Advanced MFA methods MPC TSS Support for Web and Mobile","u":"https://metamask.io/developer/embedded-wallets","d":"2026-10-22"},"share_custody_model_mpc":{"s":7,"q":"ShareC is a backup share: An extra share to be kept by the user, possibly kept on a separate device (such as a hardware device), downloaded, or based on user input with enough entropy (such as a password or security questions).","u":"https://docs.metamask.io/embedded-wallets/infrastructure/mpc-architecture/","d":"2026-10-22"}},"portal_mpc":{"exit_survivability_mpc":{"s":7,"q":"With Backups from your server To eject the private keys for your users’ wallets, their two matching backup shares need to be combined. This requires providing the following two shares to portal.ejectPrivateKeys() : User Backup Share - Encrypted backup share received from portal.backup() .","u":"https://docs.portalhq.io/sdks/web/guide/eject-a-wallet","d":"2026-10-22"},"crypto_audit_posture_mpc":{"s":7,"q":"All cryptographic functions required for secure MPC are built on widely reviewed open source libraries and have been formally reviewed by external security teams. Portal SDK’s leverage the CGGMP MPC protocol for ECDSA signatures.","u":"https://docs.portalhq.io/resources/security","d":"2026-10-22"},"pricing_transparency_mpc":{"s":8,"q":"Start-Up $499 / month Try for Free Popular Choice! Overview 1K Monthly Operations, $0.10 Overage","u":"https://www.portalhq.io/pricing","d":"2026-10-22"},"share_custody_model_mpc":{"s":9,"q":"Portal’s implementation of MPC uses two sets of key share pairs (parallel 2 of 2 threshold - four shares total). Key shares are never reconstructed for signatures and generated and conducts signatures independently across each party involved.","u":"https://docs.portalhq.io/resources/portals-mpc-architecture","d":"2026-10-22"}},"magic_mpc":{"exit_survivability_mpc":{"s":4,"q":"You can use Magic’s user.revealEVMPrivateKey method to allow your users to view their EVM private keys. Implementing this method will allow your end users to back up their private keys or take them to another wallet. Neither Magic nor the developer can see this key; only the end user can.","u":"https://docs.magic.link/embedded-wallets/wallets/features/key-export","d":"2026-10-22"},"crypto_audit_posture_mpc":{"s":4,"q":"Magic is the first Wallet-as-a-Service (WaaS) provider to attain SOC 2 Type 2, SOC 3 Type 2, ISO 27001, further underscoring our commitment to trust.","u":"https://docs.magic.link/home/security/security-compliance","d":"2026-10-22"},"pricing_transparency_mpc":{"s":6,"q":"Developer For individual builders 1,000 Monthly Active Wallets + 50,000 signatures $0.045 per additional MAW / $0.005 per additional signature $ 0 /mo","u":"https://magic.link/pricing","d":"2026-10-22"},"share_custody_model_mpc":{"s":4,"q":"Magic provides infrastructure that manages sharded private keys instead of a single encrypted key. The key is split across Magic, or optionally the Dapp/Developer depending on the security requirements.","u":"https://docs.magic.link/home/security/product-security","d":"2026-10-22"}}}}